PT-2026-31788 · Praisonai · Praisonai

Published 2026-04-09 · Updated 2026-04-10 · CVE-2026-40149

Positive Technologies (AI Summary)

CVSS v3.1

7.9

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.5.128

Description PraisonAI is a multi-agent teams system. The gateway's /api/approval/allow-list endpoint allows unauthenticated modification of the tool approval allowlist when no auth token is configured, which is the default setting. An attacker can add dangerous tool names (e.g., shell exec, file write) to the allowlist, causing the ExecApprovalManager to auto-approve all future agent invocations of those tools, bypassing the human-in-the-loop safety mechanism.

Recommendations Update to version 4.5.128 or later.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-396

CWE-306

Related Identifiers

CVE-2026-40149

GHSA-4WR3-F4P3-5WJH

Affected Products

Praisonai

References · 7

• 🔥 https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4wr3-f4p3-5wjh · Exploit
• https://osv.dev/vulnerability/GHSA-4wr3-f4p3-5wjh · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-40149 · Security Note
• https://github.com/MervinPraison/PraisonAI · Note
• https://github.com/MervinPraison/PraisonAI/releases/tag/v4.5.128 · Note
• https://twitter.com/VulmonFeeds/status/2042413293109694795 · Twitter Post
• https://twitter.com/CVEnew/status/2042561834964902215 · Twitter Post